Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/3139302e3131312e3130382e302f32322d3234203d3e20323730343137.roa
File:                     3139302e3131312e3130382e302f32322d3234203d3e20323730343137.roa (raw, json)
Hash identifier:          Q6bnRbKRPDxslnXo9uHGmMGyENZwjgK6IjFhq8cguWs=
Subject key identifier:   D8:7F:90:C5:C9:30:8F:38:5E:38:8D:08:A4:EB:04:DE:BD:A1:30:44
Certificate issuer:       /CN=E6E99B76C28F539A3F44FFE68785195ADB3B5A33
Certificate serial:       22DB1B064B19230FB7E3524656101BB6E36D154D
Authority key identifier: E6:E9:9B:76:C2:8F:53:9A:3F:44:FF:E6:87:85:19:5A:DB:3B:5A:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6E99B76C28F539A3F44FFE68785195ADB3B5A33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/3139302e3131312e3130382e302f32322d3234203d3e20323730343137.roa
Signing time:             Tue 28 Jun 2022 13:00:00 +0000
ROA not before:           Tue 28 Jun 2022 12:55:00 +0000
ROA not after:            Tue 27 Jun 2023 13:00:00 +0000
asID:                     270417
IP address blocks:        190.111.108.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:db:1b:06:4b:19:23:0f:b7:e3:52:46:56:10:1b:b6:e3:6d:15:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6E99B76C28F539A3F44FFE68785195ADB3B5A33
        Validity
            Not Before: Jun 28 12:55:00 2022 GMT
            Not After : Jun 27 13:00:00 2023 GMT
        Subject: CN=3082010A0282010100D436A273543E79B42E20850875E4A74D629FD60DF2B85944528D3EEDDFEBEA36180F0CA5BA090EF7538FC235F624C5AD9F7D5511C5C7C468AFA8EB2AECED7F6A9F67947D0E91AB5549056D9C25384E01F20964114C019E8EE06929EB5E1C6EDF75AC9D3215BA27E3F4AE43874564F3727329EA88AD8E0C557D5CEFBAAAF57284966B8B7EE7773AA6E4B8320419C90F606BEEABCDACD6FB761B1EB08334FB3E66FAECDC858776E12F86FA1F6F1FB857EF62666B1B40259AF5206235197CDB0B99CB22E16088681D93E3C803943C5D9784A2990AFAABD1F767C33044017537E6197050227959F1B24923D8D7EA3A5F0FDB831B2010C3BF4065FA2AAD5F9FF97DF90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:36:a2:73:54:3e:79:b4:2e:20:85:08:75:e4:
                    a7:4d:62:9f:d6:0d:f2:b8:59:44:52:8d:3e:ed:df:
                    eb:ea:36:18:0f:0c:a5:ba:09:0e:f7:53:8f:c2:35:
                    f6:24:c5:ad:9f:7d:55:11:c5:c7:c4:68:af:a8:eb:
                    2a:ec:ed:7f:6a:9f:67:94:7d:0e:91:ab:55:49:05:
                    6d:9c:25:38:4e:01:f2:09:64:11:4c:01:9e:8e:e0:
                    69:29:eb:5e:1c:6e:df:75:ac:9d:32:15:ba:27:e3:
                    f4:ae:43:87:45:64:f3:72:73:29:ea:88:ad:8e:0c:
                    55:7d:5c:ef:ba:aa:f5:72:84:96:6b:8b:7e:e7:77:
                    3a:a6:e4:b8:32:04:19:c9:0f:60:6b:ee:ab:cd:ac:
                    d6:fb:76:1b:1e:b0:83:34:fb:3e:66:fa:ec:dc:85:
                    87:76:e1:2f:86:fa:1f:6f:1f:b8:57:ef:62:66:6b:
                    1b:40:25:9a:f5:20:62:35:19:7c:db:0b:99:cb:22:
                    e1:60:88:68:1d:93:e3:c8:03:94:3c:5d:97:84:a2:
                    99:0a:fa:ab:d1:f7:67:c3:30:44:01:75:37:e6:19:
                    70:50:22:79:59:f1:b2:49:23:d8:d7:ea:3a:5f:0f:
                    db:83:1b:20:10:c3:bf:40:65:fa:2a:ad:5f:9f:f9:
                    7d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:7F:90:C5:C9:30:8F:38:5E:38:8D:08:A4:EB:04:DE:BD:A1:30:44
            X509v3 Authority Key Identifier:
                keyid:E6:E9:9B:76:C2:8F:53:9A:3F:44:FF:E6:87:85:19:5A:DB:3B:5A:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/E6E99B76C28F539A3F44FFE68785195ADB3B5A33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6E99B76C28F539A3F44FFE68785195ADB3B5A33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/3139302e3131312e3130382e302f32322d3234203d3e20323730343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:f6:95:40:37:10:06:98:9b:69:fe:bb:8f:02:28:62:88:90:
         cf:04:82:08:83:0f:17:01:b8:9d:8b:c8:0e:20:b4:82:dc:25:
         ed:20:bc:50:19:b0:bc:3e:45:d4:83:91:fd:6e:14:dd:71:98:
         a1:dd:16:ea:f0:d9:64:6c:be:07:a4:8f:23:d8:8e:2f:3f:07:
         e0:1e:65:ab:8c:eb:d8:21:2d:90:2f:a0:7a:f5:bb:66:6e:db:
         ed:df:f4:aa:b9:a0:57:e0:a7:2f:f3:c4:84:3b:44:8a:38:85:
         78:9b:69:cb:67:80:2e:98:49:86:d3:be:10:d7:ab:8d:f4:22:
         1d:f9:a2:4d:43:f8:b3:fd:72:36:c7:16:2c:ec:1c:86:6d:b4:
         bc:ed:5e:eb:02:7f:38:80:b1:c6:28:e7:8b:58:0c:4b:ca:53:
         79:38:4c:e8:c1:c6:32:a5:36:d3:ef:f9:1b:33:d6:eb:49:e6:
         71:ef:80:cc:a5:3b:21:63:f9:29:63:19:71:f7:09:fb:f1:0a:
         5d:be:c1:83:54:ce:74:50:b3:4b:6c:7b:ac:04:9c:9b:bc:80:
         53:f4:2b:50:e5:08:24:e2:cb:f2:d6:4c:0d:78:3d:ba:02:ea:
         1a:6d:b5:4f:e9:36:41:b1:0a:9b:bb:00:9e:9a:75:b8:55:1d:
         21:db:9e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org